vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix: escape awesomeplete label titles

Browse source
This commit is contained in:
Ankush Menat 2023-09-11 22:01:01 +05:30
parent ebfdfa283b
commit 045d35b89e
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
frappe/public/js/frappe/form/controls/link.js
View file

@ -221,7 +221,7 @@ frappe.ui.form.ControlLink = class ControlLink extends frappe.ui.form.ControlDat
return $("<li></li>")
.data("item.autocomplete", d)
.prop("aria-selected", "false")
.html(`<a><p title="${_label}">${html}</p></a>`)
.html(`<a><p title="${frappe.utils.escape_html(_label)}">${html}</p></a>`)
.get(0);
},
sort: function () {